Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/95B5298A8BFA11F186C65C0ECF1D38B0.roa
File: 95B5298A8BFA11F186C65C0ECF1D38B0.roa (raw, json)
Hash identifier: dGGy+tGu/d3VEa+RmdR8hyWyPwfvdAS4Rg9besvo/cY=
Subject key identifier: 58:91:C5:4E:5E:74:2C:78:69:35:19:3A:E0:26:80:CA:52:CE:27:A5
Certificate issuer: /CN=F363C3E1AF/serialNumber=C40F95E97D832F0F576D13EE35AEB3D75A5D30D4
Certificate serial: 0A85
Authority key identifier: C4:0F:95:E9:7D:83:2F:0F:57:6D:13:EE:35:AE:B3:D7:5A:5D:30:D4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xA-V6X2DLw9XbRPuNa6z11pdMNQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/95B5298A8BFA11F186C65C0ECF1D38B0.roa
Signing time: Thu 30 Jul 2026 09:39:40 +0000
ROA not before: Thu 30 Jul 2026 09:39:36 +0000
ROA not after: Fri 31 Mar 2028 09:39:36 +0000
asID: 327892
IP address blocks: 102.22.32.0/19 maxlen: 24
2c0f:f478::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.mft
rsync://rpki.afrinic.net/repository/afrinic/xA-V6X2DLw9XbRPuNa6z11pdMNQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2693 (0xa85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363C3E1AF, serialNumber=C40F95E97D832F0F576D13EE35AEB3D75A5D30D4
Validity
Not Before: Jul 30 09:39:36 2026 GMT
Not After : Mar 31 09:39:36 2028 GMT
Subject: CN=6a6b1bdc-165f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:fc:8e:dc:56:10:eb:1f:c3:a4:23:85:69:
67:76:e5:95:cd:e7:82:3a:5d:ab:ab:ec:d7:79:e7:
71:ac:96:73:e4:4e:cc:0e:64:3a:41:39:bd:53:39:
7e:16:c1:2f:00:20:b1:00:3a:5a:19:b8:0a:fa:47:
83:5f:f3:d0:41:77:61:b4:63:c3:55:d3:3c:d9:2f:
be:9c:d9:14:c6:72:3e:a1:71:8f:2d:a2:e2:e4:99:
1e:da:b7:33:c1:23:80:12:5d:79:1a:cb:6e:01:eb:
0c:6d:e7:c9:38:93:c4:ec:a7:9c:f0:f5:57:c9:55:
c0:be:89:6d:92:88:d5:34:bf:7a:d3:79:6c:b2:1f:
f6:82:25:1e:e2:16:ed:8e:cb:93:4a:16:98:eb:26:
5d:1b:d5:72:60:36:a0:f2:a8:b1:d8:0f:35:85:0d:
8c:76:9c:52:69:64:61:6c:66:ee:c4:8d:cd:b8:aa:
98:ef:6f:e8:f9:ff:dd:5c:87:4d:1a:5e:9a:d2:58:
4b:06:fb:3f:45:12:22:53:dd:29:2d:23:a5:fe:3b:
a9:4d:d7:f5:00:4a:53:5e:77:62:b1:70:a3:2e:80:
67:72:0f:5d:d9:de:b3:31:40:45:bc:11:25:c9:1b:
7c:f9:0b:eb:72:b9:5f:41:7e:18:ef:20:12:c0:2b:
82:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:91:C5:4E:5E:74:2C:78:69:35:19:3A:E0:26:80:CA:52:CE:27:A5
X509v3 Authority Key Identifier:
keyid:C4:0F:95:E9:7D:83:2F:0F:57:6D:13:EE:35:AE:B3:D7:5A:5D:30:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xA-V6X2DLw9XbRPuNa6z11pdMNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/95B5298A8BFA11F186C65C0ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.22.32.0/19
IPv6:
2c0f:f478::/32
Signature Algorithm: sha256WithRSAEncryption
1f:2d:e1:2b:46:fd:ed:9d:c8:7c:7b:e8:68:c3:54:1a:69:f3:
df:0f:2f:0f:bf:bf:8f:08:11:b4:d2:a1:4b:fa:16:e1:aa:39:
a8:af:7e:56:31:8c:eb:b2:6e:e8:68:14:09:9b:ed:5d:96:ea:
6f:c3:2a:15:27:55:52:8d:61:58:39:9b:90:6c:72:eb:e8:01:
c1:d4:20:25:84:51:d3:77:32:4e:06:5a:35:75:c0:ec:c6:29:
b9:dc:52:3b:50:5c:c3:03:09:c7:66:f2:2a:e0:d1:2d:d2:38:
ae:a1:73:7a:f2:1b:da:d3:23:43:0a:67:69:c9:72:85:7f:94:
82:d6:eb:d1:28:fd:c7:35:43:0a:ab:1c:0e:fc:fd:cf:5a:4b:
f6:35:d6:48:cb:0c:f9:60:36:d3:6d:00:d4:c3:d8:9c:3c:91:
25:75:c8:00:6b:57:46:38:5c:e5:c3:92:2a:d9:92:09:3b:1c:
43:47:46:26:10:e2:43:ac:2a:37:7c:b4:88:8a:77:be:b7:f3:
c2:36:26:2f:20:b6:e4:21:1c:21:6a:b2:28:05:50:98:03:eb:
77:e6:70:01:ff:70:45:fa:93:13:42:e1:26:63:7c:6f:c4:c4:
5b:1f:59:eb:e8:00:8e:71:84:f8:e3:8e:49:36:30:58:2d:26:
4b:c7:43:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:39:19 2026 by rpki-client